Trezor confirms malicious implants in three Safe 5 wallets

Trezor confirmed that three Safe 5 hardware wallets sold through CryptoBilis contained malicious implants capable of exposing recovery phrases and passphrases, according to the hardware-wallet maker. The company said the implants could capture data displayed on a device’s screen and transmit it over a mobile network to an attacker-controlled server.

The three confirmed cases give the incident a defined distribution-chain link: every affected wallet named in Trezor’s disclosure came through CryptoBilis. That makes the reseller route the clearest common thread in the company’s account.

What did Trezor do?

Trezor released firmware version 2.13.1 on Nov. 11 to disable the implants it identified. The update disables the confirmed malicious mechanism on updated devices, but Trezor said it cannot erase information that the implants already exposed.

The company also cut its reseller network by about 80%, materially narrowing the distribution system that carried the three affected wallets to buyers. Trezor said it has “received no customer reports of stolen funds.” The absence of reported theft does not erase the potential compromise to wallet credentials.

Who qualifies for a replacement?

Trezor said customers who bought through CryptoBilis from March 2026 can apply for replacements. The stated eligibility criteria center on the reseller and purchase date, rather than on Safe 5 ownership alone.

The replacement offer and the fund-migration instruction address different problems. Trezor separately instructed affected users to “move funds to a wallet created with a fresh recovery seed.” The company said the firmware update cannot erase information already exposed, so patching the device and protecting the funds require two different actions.

Why doesn’t firmware alone remove the risk?

The implant performs two connected functions, according to Trezor: it captures information shown on the wallet’s screen and sends that information over a mobile network to a server controlled by attackers. Recovery phrases and passphrases are among the data the company said the implants could expose.

Firmware 2.13.1 disables the identified implant on an updated Safe 5. It does not reverse a prior capture. If screen data left the device before the update, a clean display afterward cannot demonstrate that the earlier information remained private.

That operating distinction matters for each confirmed CryptoBilis case. A user can patch the device, request the eligible replacement and still need to move funds to a fresh-seed wallet because the update cannot undo a disclosure that may already have occurred.

What changes in the reseller channel?

Trezor’s roughly 80% reduction in resellers will concentrate hardware-wallet distribution in fewer channels. For buyers, the disclosure makes the route to market a security variable: the implants were found in devices sold through CryptoBilis, even though the company can disable the code once it identifies it.

Trezor’s response has three operational parts:

• Firmware 2.13.1 disables the implants Trezor identified.
• Customers who bought through CryptoBilis from March 2026 can apply for replacements.
• Affected users should move funds to a wallet created with a fresh recovery seed.

Trezor said it had received no customer reports of stolen funds, but its remediation guidance treats earlier exposure as unresolved. The roughly 80% cutback will test whether a narrower reseller channel reduces the kind of risk found in all three confirmed cases. Until then, the March 2026 purchase-date criterion for replacements and the fresh-seed instruction remain Trezor’s stated remediation path for CryptoBilis buyers.